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Description 

[0001] The invention relates to a security system to 
prevent unauthorised starting of the engine of a vehicle, 
with a remote control unit containing a transponder 
which, on reception of an interrogation signal by means 
of at least one reception aerial, transmits an identifica- 
tion code group by means of a transmitter unit, and a 
control unit located in the vehicle which, on actuation of 
a starter button within the vehicle, transmits the interro- 
gation signal, and which subsequently checks the iden- 
tification code group transmitted by the remote control 
unit and enables the starting procedure of the engine 
only when the identification code group coincides with 
the code group expected by it. 

[0002] Modern motor vehicles are equipped with elec- 
tronic security systems that prevent unauthorised per- 
sons from opening the motor vehicle and starting the 
engine. In order to open the vehicle and to start the en- 
gine, authorised persons must carry a remote control 
unit in which is stored an identification code group which 
is transmitted by the remote control unit and which can 
be checked by a control unit within the vehicle, whereby 
the control unit in the vehicle will allow access to the 
vehicle only when this identification code group coin- 
cides with the code group expected by it. 
[0003] Such a security system, by means of which on- 
ly authorised persons are allowed access to the vehicle, 
is described in patent application DE 100 12 637.5. 
[0004] In the case of this security system, the control 
unit in the vehicle transmits an interrogation signal as 
soon as the person wanting access to the vehicle touch- 
es the door handle. The remote control unit, which is 
carried by the person and which may be located, for ex- 
ample, in the car key, in a key tag or even in a so-called 
chip card, receives this interrogation signal and subse- 
quently re-transmits the identification code group to the 
control unit within the vehicle. The control unit then 
checks this code group for coincidence with the code 
group expected by it and, on positive verification of co- 
incidence, allows access to the vehicle. The person who 
touched the door handle can therefore operate the door 
handle as if the vehicle had not been locked. This is be- 
cause the interchange of signals between the control 
unit and the remote control unit takes place in such a 
short time that no delay is felt during the mechanical 
opening process of the vehicle. This security system can 
be complemented by a further security system, or it can 
be combined with an already existing security system, 
which only allows the engine to be started after the ex- 
ecution of an individual verification process and positive 
confirmation. Such an enhanced security system is es- 
pecially advantageous when the engine is not started 
by introducing an ignition key into a specifically provided 
ignition lock, but simply by pressing a starter button. 
Without the provision of additional security measures 
against unauthorised starting of the engine of a vehicle 
equipped in this way, dangerous situations may easily 



arise. Assuming that an authorised person has opened 
the vehicle door, the engine could be started by pressing 
the starter button without any further security check tak- 
ing place. If, for example, a child, being in the vehicle 
5 after the door has been opened, pressed the starter but- 
ton, then the engine would start whilst the person intend- 
ing to carry out the starting process is not yet in the ve- 
hicle. The vehicle could thus move off and cause a dan- 
gerous situation. 
10 [0005] A security system comprising the features of 
the preamble of claim 1 is known from DE-A-4 329 697. 
[0006] The invention therefore rests on the require- 
ment of creating a security system of the type described 
above, whereby any unauthorised starting of the engine 
is is prevented, even if the vehicle has been opened by an 
authorised person after completion of a first security 
check. 

[0007] With a security system of the type described 
above, this objective is achieved by a signal detector, 
connected to the reception aerial, whose reaction 
threshold can be toggled between a high and a low val- 
ue, and which relays the interrogation signal for further 
evaluation only when the interrogation signal level ex- 
ceeds the set reaction threshold, a code verification cir- 
cuit, connected to the signal detector, which checks the 
interrogation signal relayed by it as to whether it con- 
tains a pre-established code group and, on recognition 
of this code group, switches the reaction threshold of 
the signal detector to its high value, whereby the code 
verification circuit will cause the transmitter unit to trans- 
mit the identification code group only when it receives 
the interrogation signal, even after the signal detector 
has switched over to its high reaction threshold level. 
[0008] The security system according to the invention 
not only checks whether the person who pressed the 
starter button of the vehicle is authorised to start the en- 
gine of the corresponding vehicle, but even before this 
check, it has already verified whether this person is in- 
side the vehicle and in the area of the driving seat. By 
increasing the reaction threshold level of the signal de- 
tector after reception of the interrogation signal at a low 
reaction threshold level, it can be positively asserted 
that the person carrying the remote control unit is in the 
immediate proximity of the starter button, that is in the 
interior of the vehicle, when the signal is still received 
even at the high reaction threshold level. This makes it 
impossible for the dangerous situation to arise where 
the engine is started by a person inside the vehicle whilst 
the person carrying the remote control unit is still outside 
the vehicle. 

[0009] In an advantageous embodiment, the security 
system according to the invention comprises two further 
reception aerials which are spatially arranged in such a 
way that the main direction of reception of each of the 
three reception aerials is aligned to a different one of 
each of the three mutually perpendicular spatial axes, 
and that each of the two further reception aerials is con- 
nected to a signal detector of the same type as the one 
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connected to the first reception aerial. Because of the 
use of a total of three reception aerials, a very good spa- 
tial acquisition of the electromagnetic field originated by 
the interrogation signal is achieved, which improves on 
the certainty of the assertion that the person carrying 
the remote control unit is, in fact, inside the vehicle and 
actually in the driving seat. 

[0010] It is furthermore advantageous to provide for 
the reaction threshold levels of the signal detectors to 
be adjustable in accordance with the spatial conditions 
of the intended application field of the remote control 
unit. This setting of the reaction threshold levels is car- 
ried out once during the production process of the re- 
mote control unit, to suit the conditions in the vehicle to 
which the remote control unit will be assigned. This re- 
finement also contributes to improving the certainty of 
locating the position of the person carrying the remote 
control unit. 

[0011] An exemplified embodiment of the invention 
shall now be explained in more detail with reference to 
the attached drawing, where 

figure 1 is a schematic view illustrating the general 
application principle of the security system accord- 
ing to the invention, 

figure 2 is a block diagram of the remote control unit 
used in the security system, and 

figure 3 is a schematic representation of the remote 
control unit with three reception aerials arranged on 
it. 

[0012] The vehicle 10 represented in block form in fig- 
ure 1 shall be fitted out in such a way that only authorised 
persons shall be allowed access to the vehicle, that is 
to be allowed to open the door. The vehicle 10 contains 
a control unit 12 from which all checking, transmission 
and reception functions are carried out, containing for 
this purpose two aerials, that is one LF transmitting aer- 
ial 14 and one UHF reception aerial 16. 
[0013] Assigned to the vehicle 1 0 is a remote control 
unit 18, which is normally carried by the authorised per- 
son and which also has two aerials, that is one LF re- 
ception aerial 20 and one UHF transmitting aerial 22. 
The remote control unit 1 8 can generate an identification 
code group which is unequivocally assigned to the ve- 
hicle 10 and its control unit 12, so that only one person, 
the one carrying this remote control unit 18, can gain 
access to the vehicle. 

[0014] By actuating the switch 24, symbolically repre- 
sented as a push button, the control unit 1 2 can be made 
to transmit an interrogation signal via the LF transmitting 
aerial 14. The switch 24 is preferentially connected to 
the door handle of the vehicle, so that it will be actuated 
automatically when the door handle is touched and 
moved. The interrogation signal transmitted by the con- 
trol unit is received by the remote control unit 1 8, which 



is carried by the person actuating the door handle. Re- 
ception of the interrogation signal causes the remote 
control unit 18 to generate and transmit, via the UHF 
transmitting aerial, an identification code group which is 

5 received by the UHF reception aerial 16 of the control 
unit 12. If this code group coincides with a code group 
expected by the control unit 12, the control unit causes 
the door to unlock, so that the person gripping the door 
handle will also be able to open the vehicle door. 

10 [001 5] The existence of this security system is not an 
absolute precondition for the security system for the pre- 
vention of unauthorised starting of the engine of a vehi- 
cle, to be described in the following, since the latter can 
also be used when the authorised person has opened 

is the door of the vehicle in the conventional way by means 
of a key, without a code check having taken place. The 
security system to be described in the following, how- 
ever, complements the system mentioned above in an 
advantageous way, so that it will now be described as 

20 operating in conjunction with the access security sys- 
tem. 

[0016] Making reference to figure 2, a situation shall 
initially be described where an authorised person has 
opened the vehicle door, is sitting in the driving seat and 
25 actuates the starter button of the engine. Figure 1 shows 
this starter button 26 schematically in conjunction with 
the control unit 12. 

[0017] Actuation of the starter button 26 causes the 
control unit 1 2 to transmit an interrogation signal via the 
30 LF transmitting aerial 1 4, which is received at the recep- 
tion aerial 20. The reception aerial 20 then feeds the 
interrogation signal to a signal detector 28. The signal 
detector 28 has two reaction threshold levels, that is one 
low reaction threshold level and one high reaction 
35 threshold level. When the control unit 12 in the vehicle 
10 has transmitted the interrogation signal, then, be- 
cause of the short distance between the LF transmitting 
aerial 14 and the reception aerial 20, it is certain that it 
will be received by the remote control unit 18 at such a 
40 high field strength that the low reaction threshold level 
of the signal detector 28 will be exceeded. The signal 
detector, therefore, relays the interrogation signal re- 
ceived, or a signal derived from it, from its output 30 to 
a code checking circuit 32. This code checking circuit 
45 32 checks a code group, added by the control circuit 1 2 
to the interrogation signal as a result of the actuation of 
the switch 26, as to whether it coincides with a code 
group stored in a code store 34. Since it is assumed in 
the present case that the authorised person is now sit- 
so ting in the driving seat and has pressed the starter but- 
ton, this code group check gives a positive result, caus- 
ing the code checking circuit 32 to output a signal at its 
output 36 which puts the reaction threshold of the signal 
detector 28 into its high level state. In the present case, 
55 and because of the short distance between the remote 
control unit 1 8 and the LF transmitting aerial 1 4, the field 
strength generated by the interrogation signal is suffi- 
ciently high to exceed this high reaction threshold level 
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in the signal detector 28, so that the interrogation signal, 
or the signal derived from it, will still reach the code 
checking circuit 32. The code checking circuit 32 recog- 
nises this and outputs at its output 38 a wake-up signal 
to a microcomputer 42, contained in a transmitter unit 
40, which switches this from a current-saving quiescent 
state into an active state, thereby causing a UHF trans- 
mitter 44 in the transmitter unit 40 to transmit via the 
UHF transmitting aerial 22 an identification code group, 
unambiguously assigned to the vehicle 10. This code 
group is received by the control unit 12 in the vehicle 1 0 
via the UHF reception aerial 16 and thereupon enables 
the starting of the engine, because the checking proce- 
dure of the identification code group in the control unit 
1 2 has, in the assumed case, yielded a positive result. 
[0018] In the case where an unauthorised person, 
carrying a remote control unit not assigned to the vehicle 
1 0, has taken the driving seat and has actuated the start- 
er button, the control unit 1 2 would have recognised the 
identification code group received as incorrect and, in 
consequence, starting of the engine would not have 
been possible. 

[0019] A situation shall now be considered where a 
person definitely authorised to start the engine of the 
vehicle has opened the vehicle door and is therefore at 
a relatively short distance from the LF transmitting aerial 
1 4, but where this person is not yet sitting in the driving 
seat but remains standing outside the vehicle. Without 
the security system here to be described it would, for 
example, be possible for a child within the vehicle to 
press the starter button, thus causing the engine to start. 
How this can be prevented shall by explained in the fol- 
lowing. 

[0020] As in the case previously described, pressing 
the starter button 26 causes the control unit 1 2 to trans- 
mit the interrogation signal via the LF transmitting aerial 
1 4. This interrogation signal is received by the reception 
aerial 20 of the remote control unit 1 8 and evaluated by 
the signal detector 28. Since the signal detector 28 will, 
initially, be in the low reaction threshold level state, the 
reception field strength at the location of the remote con- 
trol unit 18 will be sufficient to exceed this threshold lev- 
el, thus causing the signal detector 28 to relay the inter- 
rogation signal, or the signal derived from it, from its out- 
put 30 to the code checking circuit 32. By checking the 
code group contained in this signal it will be confirmed 
that the starter button 26 has been actuated, so that sub- 
sequently the code checking circuit, via the signal at its 
output 36, switches the reaction threshold in the signal 
detector 28 to its high level. Since, however, the person 
carrying the remote control unit 1 8 is not in the vehicle, 
but outside the vehicle, the field strength, generated by 
the interrogation signal, at the location of the remote 
control unit 18 will, in this case, not be sufficient to ex- 
ceed the high reaction threshold level of the signal de- 
tector 28 as well, thus causing the signal transmission 
from the output 30 to the code checking circuit to cease. 
This will be detected by the code checking circuit 32, so 



that no wake-up signal will be transmitted from its output 
38 to the microcomputer 42 in the transmitter unit 40. 
There will, therefore, be no transmission of the identifi- 
cation code group via the UHF aerial 22. As a conse- 
5 quence, the control unit 1 2 in the vehicle 1 0 receives no 
reply from the remote control unit 1 8, and therefore does 
not enable the starter of the engine. Pressing the starter 
button 26 will, therefore, have no effect. 
[0021] Since in this case the code checking circuit 32 
10 does not deliver a wake-up signal at its output 38, the 
transmitter unit 40, together with the units contained in 
it, remains in its current-saving quiescent state, thus 
preventing any unnecessary current consumption, 
which has a beneficial effect on the useful life of the bat- 
15 tery in the remote control unit 1 8. 

[0022] As can be seen in figure 2, the remote control 
unit 1 8 not only contains the reception aerial 20, but two 
further reception aerials 20a and 20b. Also provided are 
two further signal detectors 28a and 28b, which in each 
case are interposed between the corresponding further 
aerial and the code checking circuit 32, in the same way 
as the signal detector 28. The additional reception aer- 
ials 20a and 20b make it possible to adapt the remote 
control unit 18 to the spatial reception conditions and, 
in particular, to the field strength distribution inside the 
motor vehicle. The aerials 20, 20a and 20b are disposed 
at the remote control unit in such a way that their main 
directions of reception are aligned in three different spa- 
tial axes, which are perpendicular to each other. In this 
manner, even under very unfavourable conditions, at 
least one of the aerials will always be able to receive the 
interrogation signal at a sufficiently high field strength to 
ensure its reliable evaluation and further processing. 
The signal detectors 28, 28a and 28b are connected in 
parallel to the code checking circuit 32, which makes 
sure that only the first signal reaching it from one of the 
outputs 30, 30a, 30b is made available for subsequent 
processing. 

[0023] To further improve the reception behaviour, not 
only can the individual reaction threshold levels of the 
signal detectors 28, 28a, 28b be adjusted via a setting 
input 46, but it is also possible to optimise each of the 
aerial resonant circuits of the reception aerials 20, 20a 
and 20b by tuning their resonant capacitance to their 
respective nominal values. 

[0024] Figure 3 shows in schematic form how the 
three aerials 20, 20a and 20b can be arranged on a re- 
mote control unit 18, embodied as a chip card, in order 
to achieve the desired alignment for reception in the 
three mutually perpendicular main spatial axes. As can 
be seen, the two aerials 20 and 20a are embodied as 
ferrite aerials which are arranged on the chip card in line 
with the axes denoted x and y, which are perpendicular 
to each other. The third aerial, the aerial 20b is embod- 
ied as an air coil whose turns are in a plane with that of 
the chip card. The main reception directions of the cor- 
responding aerials are therefore in the direction of line 
x (aerial 20), in the direction of line y (aerial 20a), and 



25 



30 



35 



40 



45 



50 



7 



EP1 147 953 B1 



8 



tions of the intended environment of use of the re- 
mote control unit (18). 



5 Patentanspruche 

1 . Sicherheitssystem zum Verhindem des unbef ugten 
Startens des Motors eines Fahrzeugs mit einer ei- 
nen Transponder enthaltenden Fernsteuereinheit 

10 (1 8), die bei Empfang eines Abfragesignals mittels 
wenigstens einer Empfangsantenne (20) eine Iden- 
tifizierungscodegruppe mittels einer Sendeeinheit 
(40) aussendet, und einer in dem Fahrzeug ange- 
ordneten Steuereinheit (12), die bei der Betatigung 

15 eines Anlassknopfes (26) im Fahrzeug das Abfra- 
gesignal aussendet und die daraufhin die von der 
Fernsteuereinheit (18) ausgesendete Identifizie- 
rungscodegruppe uberpruft und den Startvorgang 
des Motors nur dann freigibt, wenn die Identifizie- 

20 rungscodegruppe mit der von ihr erwarteten Code- 
gruppe ubereinstimmt, dadurch gekennzelchnet, 
dass die Fernsteuereinheit (1 8) einen mit der Emp- 
fangsantenne (20) verbundenen Signaldetektor 
(28) mit einer zwischen einem hohen und einem 

25 niedrigen Wert umschaltbaren Ansprechschwelle, 
der das Abfragesignal zur weiteren Auswertung nur 
dann weiterleitet, wenn der Abfragesignalpegel die 
eingestellte Ansprechschwelle uberschreitet, und 
eine mit dem Signaldetektor (28) verbundene Co- 

30 deprufschaltung (32) umfasst, die das von diesem 
weitergeleitete Abfragesignal daraufhin uberpruft, 
ob es eine vorgegebene Codegruppe enthalt, und 
bei Erkennen dieser Codegruppe die Ansprech- 
schwelle des Signaldetektors (28) auf den hohen 

35 Wert umschaltet, wobei die Codeprufschattung (32) 
die Sendeeinheit (40) nur dann zur Aussendung der 
Identifizierungscodegruppe veranlasst, wenn sie 
das Abfragesignal auch noch nach der Umschal- 
tung des Signaldetektors (28) auf den hohen Pegel 

40 der Ansprechschwelle empfangt. 



in the direction indicated by the point z perpendicular to 
the plane of the figure (aerial 20b). Due to this arrange- 
ment of the three reception aerials, the interrogation sig- 
nal is received in practice at a sufficiently high field 
strength by at least one of the aerials, whatever the po- 
sition of the remote control unit 1 8, to enable its evalu- 
ation by the code checking circuit 32. 



Claims 

1 . A security system to prevent unauthorised starting 
of the engine of a vehicle, with a remote control unit 
(18) containing a transponder which, on reception 
of an interrogation signal by means of at least one 
reception aerial (20), transmits an identification 
code group by means of a transmitter unit (40), and 
a control unit (12) located in the vehicle which, on 
actuation of a starter button (26) within the vehicle, 
transmits the interrogation signal, and which subse- 
quently checks the identification code group trans- 
mitted by the remote control unit (18) and enables 
the starting procedure of the engine only when the 
identification code group coincides with the code 
group expected by it, characterized in that said re- 
mote control unit (18) comprises a signal detector 
(28), connected to the reception aerial (20), whose 
reaction threshold can be toggled between a high 
and a low value, and which relays the interrogation 
signal for further evaluation only when the interro- 
gation signal level exceeds the set reaction thresh- 
old, a code verification circuit (32), connected to the 
signal detector (28), which checks the interrogation 
signal relayed by it as to whether it contains a pre- 
established code group and, on recognition of this 
code group, switches the reaction threshold of the 
signal detector (28) to its high value, whereby the 
code verification circuit (32) will cause the transmit- 
ter unit (40) to transmit the identification code group 
only when it receives the interrogation signal, even 
after the signal detector (28) has switched over to 
its high reaction threshold level. 

2. Security system according to claim 1 , where the re- 
mote control unit (18) comprises two further recep- 
tion aerials (20a, 20b) which are spatially arranged 
in such a way that the main reception directions (x, 
y, z) of each of the three reception aerials (20, 20a, 
20b) are aligned to a different one of each of three 
mutually perpendicular spatial axes, and that each 
of the two further reception aerials (20a, 20b) is con- 
nected to a signal detector (28a, 28b) of the same 
type as the signal detector (28) connected to the 
first reception aerial (20). 

3. Security system according to claim 2, where the re- 
action threshold levels of the signal detectors (28, 
28a, 28b) are adjustable to suit the spatial condi- 



2. Sicherheitssystem nach Anspruch 1 , bei dem die 
Fernsteuereinheit (18) zwei weitere Empfangsan- 
tennen (20a, 20b) aufweist, die raumlich so ange- 

45 ordnet sind, dass jede der drei Empfangsantennen 
(20, 20a, 20b) mit ihrer Hauptempfangsrichtung (x, 
y, z) in eine andere von drei zueinander senkrech- 
ten Raumachsen ausgerichtet ist, und dass jede 
der zwei weiteren Empfangsantennen (20a, 20b) 

so mit einem Signaldetektor (28a, 28b) der gleichen 
Art wie der mit der ersten Empfangsantenne (20) 
verbundene Signaldetektor (28) verbunden ist. 

3. Sicherheitssystem nach Anspruch 2, bei dem die 
55 Ansprechschwellen der Signaldetektoren (28, 28a, 

28b) je nach den raumlichen Gegebenheiten der 
beabsichtigten Einsatzumgebung der Fernsteuer- 
einheit (18) einstellbar sind. 
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Revendications 

1 . Systeme de security destine a empecher le demar- 
rage non autorise du moteur d'un v6hicule, avec 
une unite de commande a distance (1 8) contenant 5 
un transpondeurqui, a la reception d'un signal d'in- 
terrogation au moyen d'au moins une antenne de 
reception (20), transmet un groupe de code d'iden- 
tification au moyen d'une unite de transmission 
(40), et une unite de commande (1 2) situ6e dans le 10 
vehicule qui, a I'actionnement d'un bouton de de- 
marrage (26) dans le vehicule, transmet le signal 
d'interrogation, et qui verifie ensuite le groupe de 
code d'identification transmis par i'unite de com- 
mande a distance (18) et ne permet la procedure '5 
de demarrage du moteur que si le groupe de code 
d'identification coincide avec le groupe de code at- 
tendu par cette derniere, caracterise en ce que la- 
dite unite de commande a distance (18) comprend 
un detecteur de signal (28), re1i§ a I'antenne de re- 20 
ception (20), dont le seuil de reaction peut etre com- 
mute entre une valeur haute et une valeur basse, 
et qui ne retransmet le signal d'interrogation pour 
une evaluation supptementaire que si le niveau du 
signal d'interrogation depasse le seuil de reaction 25 
dSfini, un circuit de verification de code (32), relie 
au detecteur de signal (28), qui verifie si le signal 
d'interrogation retransmis par ce dernier contient un 
groupe de code pre&abli et, a la reconnaissance 
de ce groupe de code, commute le seuil de reaction 30 
du detecteur de signal (28) sur sa valeur haute, 
moyennant quoi le circuit de verification de code 
(32) amene I'unite de transmission (40) a ne trans- 
mettre le groupe de code d'identification que si elle 
regoit le signal d'interrogation, meme apres que le 35 
detecteur de signal (28) ait commute sur son niveau 
haut de seuil de reaction. 

2. Systeme de s^curite selon la revendication 1 , ou 
I'unite de commande a distance (18) comprend *o 
deux antennes de reception suppiementaires (20a, 
20b) qui sont agencees spatialement de facon a ce 
que les principales directions de reception (x, y, z) 

de chacune des trois antennes de reception (20, 
20a, 20b) soient alignees sur un axe different des 
trois axes spatiaux mutuellement perpendiculaires, 
et a ce que chacune des deux antennes de recep- 
tion suppiementaires (20a, 20b) soit reliee a un de- 
tecteur de signal (28a, 28b) du meme type que le 
detecteur de signal (28) relie a la premiere antenne so 
de reception (20). 

3. Systeme de s6curit£ selon la revendication 2, ou 
les niveaux de seuil de reaction des d^tecteurs de 
signal (28, 28a, 28b) sont reglables pour s'adapter 55 
aux conditions spatiales de Penvironnement d'utili- 
sation prevu de I'unite de commande a distance 
(18). 
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